Support for EKS Pod Identity

[askulkarni2]

Amazon EKS launched to simplify IAM configuration for pods. In order for AWS Gateway API Controller to support this, it will need to use an AWS SDK version that provides the new credential provider logic available >= v1.47.11.

#554 is somewhat related to this as well.

[solmonk]

Thanks for reporting this, the sdk version bump has been merged.

I feel like we could also update the docs/deployment instructions with this.

[zijun726911]

That's a good call out. In the controller guidance, it uses the old way eksctl utils associate-iam-oidc-provider to provide IAM permissions for the controller pod.

Instead, It can change to the newer and easier eksctl create podidentityassociation approach (with eks-pod-identity-agent addon) https://eksctl.io/usage/pod-identity-associations/#introduction

We can update the deploy.md doc.

[askulkarni2]

I am happy to help with the doc if needed, let me know.

[zijun726911]

#630 Added in the Pod Identity. Feel free the reopen it if you think that new doc don't work for you

aws-application-networking-k8s/docs/guides/deploy.md

Line 78 in 5365778

=== "Pod Identities (recommended)"